[SC-Help] Re: Emails SpamCop can't parse

[Mike Easter]

Phil Calvert wrote:
> What's interesting is that I just ran the original email through
> SpamCop and it parsed it successfully this time.  So something has
> changed.  Apparently someone was able to figure out what was tripping
> up SpamCop, fortunately.

Getting a parse one time [or on reparse] and not another [or on first
parse] is not unusual.  I forgot to mention that most of 'us' 'reparse'
an item which fails to body parse properly the first time.  My strategy
is to attempt a reparse, and then if it fails the second time, to
examine the header to see if there's something wrong in there
interfering with a successful parse.

> I just noticed something kind of strange, though.  The reporting
> addresses for the links keep changing.  The reporting addresses I am
> getting are different than the ones you posted.

That happens if the resolution of the domainnname changes.  Sometimes
there is 'tricky' nameservice going on.

> When I ran the original email through SpamCop just now, here are the
> reporting addresses I got for the links that were found:

<snip those addresses>

> Then I opened the tracking link in a new browser window to see what I
> would see, and noticed that the reporting addresses for the second
> link were different:

<snip>

> After a few minutes, I again opened the tracking link in a new browser
> window, and the reporting addresses were again different:

<snip>

> I wonder what's going on.  It seems a bit odd that the reporting
> addresses would change from one minute to the next.

What is stored in the tracker is the spam.  When you access the tracker,
the parser reparses.  If something has changed, like the DNS for the
domainname, then the lookup on the reporting addresses for the IP
changes from what it was

-- 
Mike Easter
kibitzer, not SC admin